TL;DR: Scammers impersonate UK banks like Barclays, Lloyds, NatWest, HSBC and Santander to steal logins and one-time codes. Verify through the official app or the number on your card, forward scam texts to 7726 and report to Action Fraud.
👉 Check my digital footprint — free 30-second check →
How bank impersonation scams work
In the UK the approach usually arrives as a text, email or call that seems to be from your bank's fraud department. It cites a suspicious payment, a blocked card or a need to confirm your identity, and it leans on urgency. The link goes to a copy of the bank's login page, or the caller wants the code your bank just sent.
Red flags
Legitimate UK banks work within limits that fraudsters routinely ignore:
- Deadline pressure: claims that your account will close or be frozen very soon.
- Code requests: a one-time passcode should never be read to another person.
- Look-alike links: inspect the address before you tap, as fake sites often differ by a character.
- Asks for full PIN or password: your bank does not need these in a call or message.
- Convincing caller ID: scammers can spoof a genuine bank number.
What to do if you get a suspicious message
Ignore the links and numbers in the message. Open the bank's app, type its address into your browser, or call the number on your card. If you have already responded, change your password through the app, ring the bank's fraud team and review your recent transactions. Prompt action improves the chance of stopping a payment.
Reporting contacts by bank
These details come from each bank's own security pages. Always start from the official app or website, not a message.
NatWest
NatWest lists 03457 888 444 (24/7) for personal account fraud and phishing@natwest.com for phishing emails.
Santander UK
Santander asks you to email phishing@santander.co.uk for phishing and to forward scam texts to 7726.
Lloyds
Lloyds tells you to contact the bank right away if you think you have been scammed, and points to Action Fraud for reporting crime. It also notes that CIFAS can prevent fraudsters using your name to apply for products or services.
Barclays
Barclays has an official fraud and scams page, linked in the sources. Contact Barclays through its official app or the number on your card.
HSBC UK
Contact HSBC UK through its official app or the number on the back of your card.
Reporting to UK authorities
Report fraud and cyber crime to Action Fraud through its online reporting tool, and forward scam texts to 7726 as Santander advises. Tell your bank at once if money has left your account.
More guides on this topic
Banking in another country? See the US bank scams guide or the Australian bank scams guide. If a scammer used your details, read the identity theft reporting steps.
Impersonation scams often start from leaked contact details. A free digital footprint check shows whether your email or number appears in exposed data.
Frequently Asked Questions
How do I know if a message from my bank is real?
Do not trust the message itself. Open the bank's official app or type its web address yourself, or call the number on your card. A real bank does not need your full password, PIN or one-time passcode.
What should I do if I gave a scammer my one-time passcode?
Change your password through the official app, call the bank's fraud line straight away and review recent transactions.
Where can I forward a scam text?
Santander advises forwarding suspicious texts to 7726, the reporting number for scam messages.
Where do I report a bank scam in the UK?
Report fraud and cyber crime to Action Fraud and tell your bank. Keep screenshots of the message.
What is CIFAS?
Lloyds says CIFAS can prevent fraudsters from using your name to apply for products or services. It is worth considering if your identity details were exposed.
Sources
- NatWest – Report fraud
- Santander UK – Security
- Lloyds Bank – Security
- Barclays – Fraud and scams
- Action Fraud